Logfile of HijackThis v1.99.1
Scan saved at 1:31:35 PM, on 6/18/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
(This was when the ULwindowseek and ULwindowurl exes were not up)
Whenever those two windows pop up, and I look in the task manager, it just shows it as a tmp file in the \windows\temp files folder. But I have no idea how to find the virus thats producing these files. The tmp files are universa application. Also, I use net defense firewall, so it tells me whenever the file is trying to access the web.
They always are trying to access a page called tramadolphentermine.info It is just a simple search engine...
Then, if I go to C:\windows\temp files there will be a bunch of .tmp files there, including the popups that tried to access the web. If i go to the properties of the exes, it says universa application.
And yes, while I was typing this, they popped up again.
I did a search on the web for universa application, and some of the results were former posts on here. The symptoms of the virus they were describing were like mine.
The guy who posted on how to fix it mentioned a dll in the system 32. I tried to find somthing like it, but no luck.
Here is a screenshot of my temp folder and the universa application exe